CVEs-PoC/2016/CVE-2016-2816.md

CVE-2016-2816

Description

Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via the multipart/x-mixed-replace content type.

POC

Reference

• http://www.ubuntu.com/usn/USN-2936-1
• http://www.ubuntu.com/usn/USN-2936-1
• http://www.ubuntu.com/usn/USN-2936-3
• http://www.ubuntu.com/usn/USN-2936-3
• https://bugzilla.mozilla.org/show_bug.cgi?id=1223743
• https://bugzilla.mozilla.org/show_bug.cgi?id=1223743

Github

No PoCs found on GitHub currently.